Open paxnull opened 10 months ago
No I have a similar target but while trying to register the give a response like this: ` HTTP/2 400 Bad Request xxxxxxxxxx:xxxx xxxxxxx:xxxxxx Cache-Control: no-store Content-Type: application/json; charset=utf-8 Date: Sat, 18 Nov 2023 16:41:26 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Mailgun-Key-Id: xxxxxxx X-Xss-Protection: 1; mode=block Content-Length: 59
{"message":"while creating domain: domain already exists"} `
So it does not seem to be vulnerable in our case
thanks for that
Yes , It's MX takeover but the mail lands in spam + you can only send it to yourself and the users you have verified
Service name
mailgun.org
Proof
Documentation
I have this target that the cname is pointing to mailgun.org and i try to taking over it, but the only verified is the SPF and MX records , the DKIM and cname was not verified, so the question is , is this still vulnerable??